Nikhil Kumar

US Patent:

20180288031, Oct 4, 2018

Filed:

Mar 31, 2017

Appl. No.:

15/475504

Inventors:

- New York NY, US
Nikhil Kumar - New York NY, US

International Classification:

H04L 29/06
H04L 9/08

Abstract:

A secure identity framework has been designed that leverages a host device as a data collection point for four properties of a digital identity profile anchored to the collection point device, and uses the digital identity profile for multi-factor authentication. A public key infrastructure key exchange is conducted for secure identity framework members corresponding to collection and access of data of the digital identity profile. Subsequently, each application participating in the secure identity framework (“participant application”) acts as a certifying authority in additional, distinct PKI key exchanges. Based on the key exchanges, the secure identity framework locally generates application specific token sets based on the digital identity profile for authentication and authorization. The secure identity framework secures exchange of data among hardware and software components of the device with secured application programming interfaces (APIs). Participating applications then use the generated tokens for downstream authentication and authorization.

US Patent:

20170272419, Sep 21, 2017

Filed:

Mar 21, 2016

Appl. No.:

15/076241

Inventors:

- New York NY, US
Nikhil Kumar - New York NY, US

International Classification:

H04L 29/06

Abstract:

An intermediary can securely migrate a security credential between systems despite different underlying encoding technologies used for authentication by the system. This intermediary can also securely migrate an identity between different authentication technologies. A secure login interface program code that is digitally signed by the intermediary is provided in advance to devices that will source authentication requests. The interface program code is at least secure because it has been digitally signed by the intermediary. An instance of the secure interface program code directs authentication requests entered into the interface instance to the intermediary, which is at least identified by the digital signature. After a successful authentication by a destination system identified by the authentication request, the intermediary can migrate the authenticated security credential to a migration target.